General
- Target ps1.ps1
- Size 318B
- Sample260809-j2fe2sbq9x
- SHA256 88bb59d77a1d50fce2d404affd3248693b19eaada769ec6edf022c5571b6bf7f
- MD5 12132496a71564546621f982d1731014
- SHA1 57fcea25e24230d29a9db747780fa706f149aace
- SHA512 9698d4b74b1d8f88ac0e546cea5d84f6e3aeec8a3859f5be9aa6b4a5712ee0f1c8b7b3a4c46c9a077e1a81d5648f5bdbc29418d245f9603a048b641c49aebec7
- TLSH T19BE0721382EE837C8F31880190EA311A14EBB01CA22B22834BB08818B8C06DFC7ED0C6
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
ps1.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ps1.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target ps1.ps1
- Size 318B
- SHA256 88bb59d77a1d50fce2d404affd3248693b19eaada769ec6edf022c5571b6bf7f
- MD5 12132496a71564546621f982d1731014
- SHA1 57fcea25e24230d29a9db747780fa706f149aace
- SHA512 9698d4b74b1d8f88ac0e546cea5d84f6e3aeec8a3859f5be9aa6b4a5712ee0f1c8b7b3a4c46c9a077e1a81d5648f5bdbc29418d245f9603a048b641c49aebec7
- TLSH T19BE0721382EE837C8F31880190EA311A14EBB01CA22B22834BB08818B8C06DFC7ED0C6
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.